Passwords, two-step sign-in, fake messages and what to do when someone takes over your account.
How to protect online accounts: a password manager with a master password of 16+ characters, two-factor authentication (SMS, app, hardware key, passkey), backup codes, protection against SIM swapping, and an IRS IP PIN checklist, based on recommendations from CISA, FTC, and FCC.
How many characters a password should have according to NIST and CERT Polska, why periodic password changes are harmful, how a password manager works, which second factor is resistant to phishing, and what passkeys really are, with instructions for Google, Apple, Microsoft, Facebook, WhatsApp, and banks.
How to identify fake emails and SMS in the USA: signals according to the FTC and CISA, reading website addresses, typical SMS about packages, toll fees, and bank alerts, QR codes. A flowchart on what to do after clicking and where to report: reportphishing@apwg.org, 7726, ReportFraud.ftc.gov, IC3.
Someone took over your email, Facebook, or Instagram? Step-by-step plan: first 5 minutes, 15 minutes, hour, and 24 hours. Recovery for Google, Microsoft, Meta, WhatsApp, and Apple, protection against SIM swap, reports in Poland and the USA.
A window displaying a 'Microsoft technical support' number is always a scam; we explain the Phantom Hacker scheme, refund scams, cash and gold couriers, and the step-by-step actions to take if someone gained remote access to your computer or if money has already been sent.
A voice on the phone sounds like a grandchild, but it's a scammer. Learn how voice cloning and deepfake work, how to verify the caller, family passwords, a guide for seniors on the phone, and where to report scams in Poland and the USA.